CVE-2026-20302 Cisco RoomOS Stack Overflow Vulnerability

A vulnerability in the USB driver of Cisco RoomOS could allow an unauthenticated, local attacker with physical access to the USB port on an affected device to execute arbitrary code with root privileges. This vulnerability is due to insufficient boundary checks for specific data that is provided...

EUVD-2026-62554

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 1.0.0 until 4.14.6 and 5.0.0-beta2, HandleSecureMessage in src/remoted/secure.c passes a pointer inside its stack buffer to ReadSecMSG, and src/oscrypto/shared/msgs.c decompresses up to OSMAXSTR byt...

MINI-HM6M-52WH-8H85

Bulletin has no description...

MINI-JM6M-52VR-R678

Bulletin has no description...

MINI-QPF2-JVR3-H86X

Bulletin has no description...

MINI-23PW-QW2M-C849

Bulletin has no description...

MINI-XC55-QFXG-J6JH

Bulletin has no description...

MINI-28VM-VX4P-HGWW

Bulletin has no description...

MINI-JHXC-CXCH-5CC7

Bulletin has no description...

MINI-FJ89-W3QC-XGHW

Bulletin has no description...

MINI-G4PF-2J7R-CCGX

Bulletin has no description...

MINI-3GX9-3686-632F

Bulletin has no description...

CVE-2026-74382

A flaw was found in the Linux kernel's clsbpf component, which handles traffic control filtering. A local attacker could exploit this vulnerability by triggering a specific sequence of failures during an offload rollback operation. This leads to an unbounded recursion, causing a stack overflow an...

CVE-2026-58082

The ISO-2022 encoding module in FreeBSD's iconv(3) allocates a 6-byte stack buffer (MB_LEN_MAX) but some variants require up to 10 bytes per character, causing up to a 4-byte stack overflow. Affects all supported FreeBSD versions; patched in stable/14 and stable/15 branches on 2026-06-30. No work...

EUVD-2026-62349

The ISO-2022 encoding module used a stack buffer sized to MBLENMAX 6 bytes for intermediate character output. Some ISO-2022 variants can require up to 10 bytes per character, in which case conversions can trigger a stack buffer overflow of up to four bytes. An application that uses iconv3 to...

CVE-2026-49420

The RTSP handler in libalias rewrote outgoing packets into a fixed-length stack buffer without checking whether the rewritten data fit in the buffer, or whether the result fit back in the original packet. A host sending crafted RTSP traffic from inside a NAT gateway using libalias can overflow a...

CVE-2026-76008

Comfast CF-N1-S 2.6.0.1 has a stack-based buffer overflow in the get_para_from_uri function of /cgi-bin/mbox-config, triggered by manipulating the width/height URI parameters. CVSS 10.0 (Critical) allows unauthenticated remote attackers to achieve full system compromise. No patch or exploit detai...

CVE-2026-76003 UTT HiPER 1200GW formGroupConfig strcpy stack-based overflow

A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formGroupConfig. Executing a manipulation of the argument timestart can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been mad...

CVE-2026-75877 TRENDnet TV-IP751WIC alphapd FUN_0043372C stack-based overflow

A flaw has been found in TRENDnet TV-IP751WIC 11.03.03. This vulnerability affects the function SystemNetworkChanged/SystemDDNSChanged/SystemEmailChanged/SystemFTPChanged/websCheckRealm/FUN00432574/FUN0043372C of the component alphapd. Executing a manipulation can lead to stack-based buffer...

CVE-2026-69220

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java permits ValueReader.readTable and ValueReader.readArray to call ValueReader.readFieldValue recursively f...